Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C7B15/326EB0B48DEB11ED93FAAD0FC4F9AE02/WA5Ga31PqGSdLgsnN16ihsbFRYQ.mft
File:                     WA5Ga31PqGSdLgsnN16ihsbFRYQ.mft (raw, json)
Hash identifier:          Hfi/7abqzjPMf07VnZOkkKTshwIJRtGSulwxeE29NT0=
Subject key identifier:   83:76:E9:F8:91:EE:05:92:E5:4E:17:E0:55:D6:06:09:05:F3:42:2C
Authority key identifier: 58:0E:46:6B:7D:4F:A8:64:9D:2E:0B:27:37:5E:A2:86:C6:C5:45:84
Certificate issuer:       /CN=A91C7B15/serialNumber=580E466B7D4FA8649D2E0B27375EA286C6C54584
Certificate serial:       02D1
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/WA5Ga31PqGSdLgsnN16ihsbFRYQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C7B15/326EB0B48DEB11ED93FAAD0FC4F9AE02/WA5Ga31PqGSdLgsnN16ihsbFRYQ.mft
Manifest number:          02CB
Signing time:             Tue 06 Oct 2026 16:50:52 +0000
Manifest this update:     Tue 06 Oct 2026 16:50:52 +0000
Manifest next update:     Tue 13 Oct 2026 16:50:52 +0000
Files and hashes:         1: WA5Ga31PqGSdLgsnN16ihsbFRYQ.crl (hash: KdixByvOmyXv/c+srcBX2ZNwSZ7tf5Rryzo5Zi70Kns=)
                          2: 04594232DEA011EE91181415C4F9AE02.roa (hash: r0uDvba6DftUN0N3BUlL384UPeW2DqBJfJ5rm2wQtaQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C7B15/326EB0B48DEB11ED93FAAD0FC4F9AE02/WA5Ga31PqGSdLgsnN16ihsbFRYQ.crl
                          rsync://rpki.apnic.net/member_repository/A91C7B15/326EB0B48DEB11ED93FAAD0FC4F9AE02/WA5Ga31PqGSdLgsnN16ihsbFRYQ.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/WA5Ga31PqGSdLgsnN16ihsbFRYQ.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Oct 2026 16:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 721 (0x2d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C7B15, serialNumber=580E466B7D4FA8649D2E0B27375EA286C6C54584
        Validity
            Not Before: Oct  6 16:50:52 2026 GMT
            Not After : Oct 13 16:50:52 2026 GMT
        Subject: CN=6ac526ec-8f50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:95:51:c0:f4:1e:f6:1d:40:14:5d:2d:89:a2:
                    b9:62:13:b8:a1:48:db:82:0e:9d:b5:51:22:71:b4:
                    30:1c:71:45:a3:95:ba:5c:86:78:58:b1:5b:79:fa:
                    b9:67:7b:84:d4:b3:a5:23:20:52:44:9b:49:fe:6d:
                    69:fe:ca:7c:20:dc:38:24:3e:c0:5a:2a:55:ae:34:
                    51:29:4d:f8:15:f6:81:9a:e3:f2:b1:91:56:e8:66:
                    33:e9:6f:67:c8:54:28:de:06:3f:46:d3:fb:5b:cc:
                    51:9f:0b:2b:88:d4:40:c9:ee:27:a4:34:5a:fe:8e:
                    02:ea:1f:cb:af:7a:25:8b:ff:04:0c:4b:09:e5:64:
                    24:1f:66:c1:48:82:fd:8c:8b:0c:10:3c:9b:d3:3f:
                    18:4e:69:54:13:d8:a8:49:0f:50:fa:6d:e3:bf:2b:
                    43:a0:18:18:be:e4:ba:cb:e6:39:09:26:f7:0a:ef:
                    77:02:3f:1c:8b:fc:b1:5e:ae:3f:f5:8b:80:b4:c6:
                    63:b4:92:8e:80:7a:09:c8:6b:25:6c:e2:00:14:bc:
                    0c:30:ff:4e:62:76:b0:3c:96:52:f5:59:e6:d5:14:
                    b6:58:d1:73:30:48:75:fc:ae:f4:05:40:54:6e:7a:
                    8f:1b:d3:8f:df:c2:ec:91:ab:34:1f:7f:23:b2:77:
                    fd:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:76:E9:F8:91:EE:05:92:E5:4E:17:E0:55:D6:06:09:05:F3:42:2C
            X509v3 Authority Key Identifier:
                keyid:58:0E:46:6B:7D:4F:A8:64:9D:2E:0B:27:37:5E:A2:86:C6:C5:45:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C7B15/326EB0B48DEB11ED93FAAD0FC4F9AE02/WA5Ga31PqGSdLgsnN16ihsbFRYQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/WA5Ga31PqGSdLgsnN16ihsbFRYQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7B15/326EB0B48DEB11ED93FAAD0FC4F9AE02/WA5Ga31PqGSdLgsnN16ihsbFRYQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:b8:b2:dd:9b:13:c6:50:db:b8:99:05:85:0d:6d:bc:3f:d9:
         7c:bb:3b:2b:2a:d2:c1:75:ff:40:b6:67:03:46:5f:6e:f2:18:
         c9:db:5a:e8:41:4a:d1:6b:5e:d4:0f:04:b0:dd:9a:c5:a7:9e:
         73:33:12:9a:da:71:f2:51:27:ba:53:54:e9:73:50:b8:81:c8:
         e0:90:e9:0e:b4:e7:00:2b:12:bb:76:b9:59:84:85:ce:cb:a7:
         54:44:5b:d2:bb:6a:1f:72:ba:12:cb:9d:08:2c:d7:33:1a:1e:
         35:f3:ae:4e:fa:45:71:2e:ac:01:db:7c:a6:ae:fd:a2:f1:56:
         c7:7b:aa:45:11:03:e9:4d:e3:02:3f:be:99:5d:95:c4:bb:76:
         9d:b7:5b:bb:8c:1a:c3:92:5b:59:98:08:82:d9:7c:26:67:60:
         97:46:95:34:c8:bf:5c:7a:a1:18:5c:f1:c1:ce:01:c8:55:05:
         1b:83:e3:e5:d5:ac:ff:b1:f2:21:9b:7d:39:be:d1:d3:be:b3:
         eb:d5:58:ea:95:aa:f6:1d:b3:fd:ad:1e:85:53:d4:02:4a:c8:
         fc:ce:4e:34:86:2e:db:c1:71:c2:49:6c:03:c6:4d:e8:2f:8c:
         bb:f3:30:7c:28:f8:ce:60:62:1c:37:c1:ec:5a:a1:ad:58:c1:
         b9:68:49:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 05:13:33 2026 by rpki-client